The week's pick
Reseach Article
A Framework to analyze the security of Text based CAPTCHA
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 1 - Number 27 |
| Year of Publication: 2010 |
| Authors: A.A. Chandavale, A.M.Sapkal, R.M.Jalnekar |
10.5120/489-800
|
A.A. Chandavale, A.M.Sapkal, R.M.Jalnekar . A Framework to analyze the security of Text based CAPTCHA. International Journal of Computer Applications. 1, 27 ( February 2010), 112-117. DOI=10.5120/489-800
Abstract
CAPTCHA stands for Completely Automated Public Turing Test to Tell Computer and Human Apart. It is the test that human can pass easily but computer cannot. For example, humans can read distorted text, but current computer programs cannot. For many years, CAPTCHAs have proven very useful for many reputable, Web-based email and application service providers, including social networking sites and online auction sites, for the purpose of deterring automated registration. This paper proposes the framework for CAPTCHA strength measurement under which an algorithm for CAPTCHA solver is implemented. The strength of CAPTCHA in turn will determine the security of CAPTCHA. The results shows that the CAPTCHA can be broken and security of text based CAPTCHA can be analyzed.
References
- Bruce Schneier. "MySpace Passwords aren't so Dumb" (HTML).Wired Magazine. http://www.wired.com/politics/security/commentary/securitymatte rs/2006/12/72300?currentPage=2. Retrieved on April 11 2008.
- Ariel Rabkin “Personal knowledge questions for fallback authentication: Security questions in the era of Face book” IEEE Symposium on Usable Privacy and Security (SOUPS) 2008, July 2008.
- Guardian, “How CAPTCHA was foiled: Are you a man or a mouse?” http://www.guardian.co.uk/technology/2008/aug/28/internet. CAPTCHA. Retrieved on 08/28/2008.
- L von Ahn, M Blum and J Langford. “Telling Humans and Computer Apart Automatically”, CACM, V47, No2, 2004.
- K Chellapilla, K Larson, P Simard and M Czerwinski, “Designing human friendly human interaction proofs”, ACM CHI’05, 2005.
- G Mori and J Malik. “Recognizing objects in adversarial clutter: breaking a visual CAPTCHA”, IEEE Computer Vision & Pattern Recognition (CVPR03), vol. 1, pp. 134- 141, June 2003.
- J Yan and A S El Ahmad. “Breaking Visual CAPTCHAs with Naïve Pattern Recognition Algorithms”, Proc. IEEE Computer Security Applications Conference (ACSAC’07) pp. 279-291, December 2007 .
- BotBlock. http://www.chimetv.com/tv/products/botblock.shtml. Accessed in Feb, 2008.
- P Simard, R Szeliski, J Benaloh, J Couvreur and I Calinov, “Using character recognition and segmentation to tell computers from humans”, International Conference on Document Analysis and Recognition (ICDAR), 2003.
- C Pope and K Kaur. “Is It Human or Computer? Defending ECommerce with CAPTCHA”, IEEE IT Professional, March 2005, pp. 43-49
Index Terms
Keywords